Network Security

For IOS Firewall, which is better to inspect on the inside interface or the outside, it appears you can go wither way. 

Brought up the 5505 today with a site to site VPN.The site to site tunnel is up and I have a constant ping on a machine inside the 5510 network(192.168.0.0/24) going out to the 172.16.100.0/24 on the 5505 network. I see the traffic leave the 5510 and...

In order to add the existing license to new CCO ID please follow the steps below: Login to License Registration portal with CCO ID and passwordClick on View Existing License Link, Click on "Add License" Select "Source Fire License Key" from the pull ...

Hi All,On one of our firewalls we hosting a application/service which impacts clients and we recently conducted a Pen test, the external company doing the Pen test have advised us that there is a vulnerability relating to OpenSSL. We have checked the...

So i understand the basic syntax for NATing a single internal network to an outside interface for allowing internet access.  Something like below... object network NAT_INSIDE_NETS  subnet 10.0.0.0 255.255.255.0object network NAT_INSIDE_NETS  nat (ins...

We have 2 IP camera in the computer room and we would like to use an acl to control http access to the individual IP addresses and only leave the access through the server.  The server is on port 21. The Cameras are on an unmanaged switch hooked to t...

Hello,we have 2 ASA 5520s (active/standby) which have a throughput of 450mbps and we have been hitting this recently and the CPU goes through the roof and I see overruns too.I've been using this method to gather the stats, but it is too manual and I ...

Hi, community! Bug CSCur94645 is related to incorrect packet generated by ASA, when you try to log in ASDM via RADIUS authentication.As it seen in bug description - it's fixed, but fixed releases include some strange one: 100.12(0.109)100.13(0.14)100...

We are getting ready to upgrade from a FWSM running 4.0x to an ASASM 9.1.5. I have run the migration tool and uploaded the config to startup and let it boot. I have seen several references to having the change access-lists to use the real IP not the ...

Hello,  I have an ASA5550 running asa914-k8.bin.  It is connected to a Time Warner cable modem.  I have a block of 5 public IP's from TW.  From both outside and from the ASA I can ping the first IP of the block.  I get replies.  When I try to ping th...

We have our Voice and Data Vlan segregated by an ASA Firewall. The CallManager sits within the Voice Vlan. The IPT Solution reference network Design Document says; "By placing a firewall between the Cisco CallManager cluster and both the voice and da...